Windows XP Flaw 'Extremely Serious'
scottott wrote to mention a Washington Post article with the news that the security hole we mentioned on Wednesday has widened. Computers can now be infected just by visiting infected web sites, or looking at images in the preview panel of older versions of Outlook. From the article: "At first, the vulnerability was exploited by just a few dozen Web sites. Programming code embedded in these pages would install a program that warned victims their machines were infested with spyware, then prompted them to pay $40 to remove the supposed pests. Since then, however, hundreds of sites have begun using the flaw to install a broad range of malicious software. SANS has received several reports of attackers blasting out spam e-mails containing links that lead to malicious sites exploiting the new flaw, Ullrich said."
"Mac and Linux computer users are not at risk with this attack, even if their computers run Microsoft programs such as Office or the Internet Explorer Web browser."
Amazing!
Guys, you keep posting that same story about a serious security flaw in Windows.
When is a Windows flaw ever not extremely serious?
Would someone tell me if the "just by visiting an infected site" link, is a link to an infected site, or an article about the infected sites?
..to add a new mime-type definition to the Windows defaults..
Identifier: X-Application/WinTrojan
Name: Windows Trojan File
File Extension Pattern: *.wtf
~ Better a freak than a sheep. ~